diff --git a/backport-CVE-2022-3099.patch b/backport-CVE-2022-3099.patch
new file mode 100644
index 0000000000000000000000000000000000000000..6650510ce23f8a99f511dc4813e7490841fd1d52
Binary files /dev/null and b/backport-CVE-2022-3099.patch differ
diff --git a/vim.spec b/vim.spec
index bc622387727c4a2bba8558598c9b8a433252abf3..4b2d691dd41321d205454d413cef305292295ba3 100644
--- a/vim.spec
+++ b/vim.spec
@@ -12,7 +12,7 @@
 Name:           vim
 Epoch:          2
 Version:        9.0
-Release:        11
+Release:        12
 Summary:        Vim is a highly configurable text editor for efficiently creating and changing any kind of text.
 License:        Vim and MIT
 URL:            http://www.vim.org
@@ -60,6 +60,7 @@ Patch6029:      backport-CVE-2022-2980.patch
 Patch6030:      backport-CVE-2022-2982.patch
 Patch6031:      backport-CVE-2022-3016.patch
 Patch6032:      backport-CVE-2022-3037.patch
+Patch6033:      backport-CVE-2022-3099.patch
 
 Patch9000:      bugfix-rm-modify-info-version.patch
 
@@ -458,6 +459,12 @@ LC_ALL=en_US.UTF-8 make -j1 test
 %{_mandir}/man1/evim.*
 
 %changelog
+* Thu Sep 08 2022 renhongxun <renhongxun@h-partners.com> - 2:9.0-12
+- Type:CVE
+- ID:CVE-2022-3099
+- SUG:NA
+- DESC:fix CVE-2022-3099
+
 * Wed Aug 31 2022 yinyongkang <yinyongkang@kylinos.cn> - 2:9.0-11
 - Type:CVE
 - ID:CVE-2022-3037